Does Embed Consent have any unpatched vulnerabilities?

No. All known vulnerabilities in Embed Consent have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is Embed Consent compatible with WordPress 6.9.4?

According to WordPress.org data, Embed Consent 1.1.1 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is Embed Consent compatible with PHP 7.4+?

Embed Consent requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Embed Consent updated?

Embed Consent was last updated on Nov 29, 2025. Frequent updates are generally a positive security signal.

What is Embed Consent's security score?

Embed Consent has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Embed Consent Security & Risk Analysis

wordpress.org/plugins/embed-consent

Replaces embed blocks with a confirmation to ask for consent before loading third-party resources.

10 active installs v1.1.1 PHP 7.4+ WP 6.1.1+ Updated Nov 29, 2025

consentembedgdproembedprivacy

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is Embed Consent Safe to Use in 2026?

Generally Safe

Score 100/100

Embed Consent has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago

Risk Assessment

The 'embed-consent' plugin v1.1.1 exhibits a generally strong security posture, with no known vulnerabilities (CVEs) and a clean taint analysis report, indicating no critical or high severity data flow issues. The code analysis reveals good practices such as 100% use of prepared statements for SQL queries and the presence of capability checks. The absence of file operations, external HTTP requests, and dangerous functions further contributes to its secure design. The limited attack surface, with only one shortcode and no unprotected AJAX handlers or REST API routes, is also a positive indicator.

Key Concerns

Low percentage of properly escaped output
No nonce checks on entry points

Vulnerabilities

None known

Embed Consent Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 17, 2026

Embed Consent Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

14 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

41% escaped34 total outputs

Attack Surface

Embed Consent Attack Surface

Entry Points1

Unprotected0

Shortcodes 1

[embed_consent_opt_out] embed-consent.php:392

WordPress Hooks 7

actioninitembed-consent.php:27

actionwp_enqueue_scriptsembed-consent.php:255

filterembed_oembed_htmlembed-consent.php:269

filterrender_block_core/embedembed-consent.php:385

actioninitembed-consent.php:444

actionadmin_initembed-consent.php:603

actionadmin_menuembed-consent.php:643

Maintenance & Trust

Embed Consent Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedNov 29, 2025

PHP min version7.4

Downloads1K

Community Trust

Rating100/100

Number of ratings1

Active installs10

Alternatives

Embed Consent Alternatives

oEmbed Manager

oembed-manager

100

Manage oEmbed capabilities of your website and take a new step in the GDPR compliance of your embedded content.

200 No CVEs

Complianz – GDPR/CCPA Cookie Consent

complianz-gdpr

Configure your Cookie Banner, Cookie Consent and Cookie Policy with our Wizard and Cookies Scan.

1.0M 9 CVEs

Cookie Notice & Compliance for GDPR / CCPA

cookie-notice

Cookie Notice allows you to you elegantly inform users that your site uses cookies and helps you comply with GDPR, CCPA and other data privacy laws.

900K 6 CVEs

Cookiebot by Usercentrics – Automatic Cookie Banner for GDPR/CCPA & Google Consent Mode

cookiebot

Install your cookie banner in minutes. Automatically scan and block cookies to comply with the GDPR, CCPA, Google Consent Mode v2. Free plan option.

100K 1 unpatched

Real Cookie Banner: GDPR & ePrivacy Cookie Consent

real-cookie-banner

Obtain GDPR (DSGVO/RGPD) and ePrivacy Directive (TDDDG/TTDSG, LOPD-GDD, DTA) compliant consents in your cookie banner. More than just a cookie notice!

100K 4 CVEs

Developer Profile

Embed Consent Developer Profile

Sam

1 plugin · 10 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Embed Consent

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/embed-consent/assets/css/embed-consent.min.css/wp-content/plugins/embed-consent/assets/js/embed-consent.min.js

Script Paths

/wp-content/plugins/embed-consent/assets/js/embed-consent.min.js

Version Parameters

embed-consent/assets/css/embed-consent.min.css?ver=embed-consent/assets/js/embed-consent.min.js?ver=

HTML / DOM Fingerprints

CSS Classes

embed-consent-overlayembed-consent-dialogembed-consent-provider-iconembed-consent-textembed-consent-buttonembed-consent-dialog-content

HTML Comments

Data Attributes

data-embed-consent-providerdata-embed-consent-provider-namedata-embed-consent-privacy-urldata-embed-consent-cookies-url

JS Globals

EmbedConsent

FAQ